ThreatsDay Bulletin: $290M DeFi Hack, macOS LotL Abuse, ProxySmart SIM Farms +25 New Stories

**Weekly ThreatsDay bulletin:** A broad roundup of active and emerging cyber threats including a state-linked $290M DeFi theft that manipulated RPC infrastructure, active RCE exploitation chains (MajorDoMo, ActiveMQ/Jolokia), a surge of malicious npm packages delivering backdoors/stealers and cross-ecosystem propagation, large-scale phishing and malware-as-a-service offerings, widespread malicious browser extensions and SIM-farm infrastructure, plus multiple campaigns, emerging groups, and supply-chain and privacy concerns—urging patching, supply-chain hygiene, and stricter input/trust controls.